This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9EDF5ACD04E11F0A7325FE8DAE4EC9C.roa File: A9EDF5ACD04E11F0A7325FE8DAE4EC9C.roa (raw, json) Hash identifier: bIPclD5IZ3iRmyU7rtHqO+wlHl6K31L8PPo9KIsFQ24= Subject key identifier: 44:22:6D:C5:91:A1:63:77:FD:3E:AF:B3:CC:C0:28:59:30:75:7A:C3 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC70 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9EDF5ACD04E11F0A7325FE8DAE4EC9C.roa Signing time: Wed 03 Dec 2025 13:47:53 +0000 ROA not before: Wed 03 Dec 2025 13:47:47 +0000 ROA not after: Mon 05 Jan 2026 13:47:47 +0000 asID: 202656 IP address blocks: 154.219.217.0/24 maxlen: 24 154.219.218.0/24 maxlen: 24 154.219.219.0/24 maxlen: 24 154.219.220.0/24 maxlen: 24 154.219.221.0/24 maxlen: 24 154.219.223.0/24 maxlen: 24 154.219.224.0/24 maxlen: 24 154.219.225.0/24 maxlen: 24 154.219.226.0/24 maxlen: 24 154.219.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Dec 2025 11:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109680 (0x1ac70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 13:47:47 2025 GMT Not After : Jan 5 13:47:47 2026 GMT Subject: CN=69303f89-c765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:49:7a:6d:0b:30:c2:4d:97:a5:fa:14:9a: c2:4e:4a:96:3d:e0:70:45:52:5c:3b:f7:07:1f:58: 89:42:ab:dc:d4:1f:dc:57:be:95:ac:ce:12:da:67: 68:1d:52:3d:1d:27:0a:52:14:13:4f:a4:83:61:25: 06:c4:07:82:ca:4d:53:ec:f6:4f:ec:16:c4:61:d3: 97:ea:4d:59:3b:8a:e0:9d:fc:a6:b1:6e:4f:a1:30: 92:39:f5:60:f0:ad:26:fd:43:de:10:6a:b7:07:d9: b2:0e:18:76:b6:e8:3d:cf:5c:3f:e0:0f:4e:8f:ae: 3a:ca:2b:42:d2:7a:7d:23:68:8b:eb:a6:7c:b7:76: 41:b0:c8:5d:d9:cd:af:20:0a:54:2b:4d:3f:38:26: 6c:c0:5a:3d:33:5e:61:30:20:fe:3e:87:15:54:46: d6:a6:e5:24:31:76:3f:ef:dd:54:7c:50:6f:95:62: 30:78:b7:4e:0c:3e:fe:c0:b0:4b:7c:84:0d:38:fe: 45:3b:4d:f8:6b:55:8d:cc:a9:43:4e:10:77:53:89: 45:c8:70:a8:ca:50:e6:86:1c:22:90:e0:6c:0c:4c: 90:c1:6c:a4:00:3b:ac:5b:e3:5a:ca:11:47:3d:f1: 91:52:f8:ef:02:a8:9c:39:b4:9f:9f:b4:7e:be:03: 92:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:22:6D:C5:91:A1:63:77:FD:3E:AF:B3:CC:C0:28:59:30:75:7A:C3 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9EDF5ACD04E11F0A7325FE8DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.219.217.0-154.219.221.255 154.219.223.0-154.219.227.255 Signature Algorithm: sha256WithRSAEncryption 89:1e:c0:16:b8:a8:d5:b0:84:0c:34:cd:9d:43:97:10:38:e6: 2e:72:72:dc:fd:d5:39:bb:d1:39:0d:23:33:a7:b2:bd:14:55: f0:0f:c5:90:f8:77:bd:23:5a:ee:3f:26:81:8d:14:77:be:41: 75:21:b6:b3:94:8a:c6:df:78:d5:ba:a7:4a:33:7e:c4:82:ce: b4:08:67:22:bb:c6:c6:03:16:d7:c3:37:e5:9a:11:9f:13:11: 91:e0:0d:4b:bf:53:2c:53:66:6d:23:0c:5f:60:33:3c:13:2d: f6:6b:ac:d0:03:4f:d2:4d:c5:f2:65:56:6e:23:c6:7c:b3:65: 9b:cc:ff:e7:aa:65:68:8a:95:19:74:a8:38:76:c6:79:39:33: 2c:0e:44:05:46:1b:08:f0:35:7a:5a:af:a7:70:3d:61:a6:2d: 2d:af:9b:ba:46:bc:3f:9a:35:74:93:8c:c5:a9:4b:ed:41:64: 05:7c:df:aa:0a:c1:65:1a:87:2c:0c:bd:a0:e6:bd:11:1c:92: eb:fc:04:69:53:cb:45:78:ca:d0:3c:36:ab:55:84:98:b7:93: 33:73:c1:15:23:dd:8a:47:6a:46:ab:5a:ff:d0:be:94:ec:18: 49:9e:09:72:2a:95:c6:bc:94:be:92:c9:bf:b9:fb:6a:5f:77: ce:4b:bf:44 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIDAaxwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTM0NzQ3WhcNMjYwMTA1MTM0NzQ3WjAYMRYw FAYDVQQDEw02OTMwM2Y4OS1jNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAn0hJem0LMMJNl6X6FJrCTkqWPeBwRVJcO/cHH1iJQqvc1B/cV76VrM4S 2mdoHVI9HScKUhQTT6SDYSUGxAeCyk1T7PZP7BbEYdOX6k1ZO4rgnfymsW5PoTCS OfVg8K0m/UPeEGq3B9myDhh2tug9z1w/4A9Oj646yitC0np9I2iL66Z8t3ZBsMhd 2c2vIApUK00/OCZswFo9M15hMCD+PocVVEbWpuUkMXY/791UfFBvlWIweLdODD7+ wLBLfIQNOP5FO034a1WNzKlDThB3U4lFyHCoylDmhhwikOBsDEyQwWykADusW+Na yhFHPfGRUvjvAqicObSfn7R+vgOSIQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFEQi bcWRoWN3/T6vs8zAKFkwdXrDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9BOUVERjVBQ0QwNEUxMUYwQTczMjVGRThEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACa29kDBAGa29wwDAME AJrb3wMEAprb4DANBgkqhkiG9w0BAQsFAAOCAQEAiR7AFrio1bCEDDTNnUOXEDjm LnJy3P3VObvROQ0jM6eyvRRV8A/FkPh3vSNa7j8mgY0Ud75BdSG2s5SKxt941bqn SjN+xILOtAhnIrvGxgMW18M35ZoRnxMRkeANS79TLFNmbSMMX2AzPBMt9mus0ANP 0k3F8mVWbiPGfLNlm8z/56plaIqVGXSoOHbGeTkzLA5EBUYbCPA1elqvp3A9YaYt La+buka8P5o1dJOMxalL7UFkBXzfqgrBZRqHLAy9oOa9ERyS6/wEaVPLRXjK0Dw2 q1WEmLeTM3PBFSPdikdqRqta/9C+lOwYSZ4JciqVxryUvpLJv7n7al93zku/RA== -----END CERTIFICATE-----Generated at Fri Dec 5 15:39:49 2025 by rpki-client